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Summary 

Based on the Belgian and the ENSREG "Stress test" specifica tions, an assessment of the safety margins 
of the facility is performcd by NRG, The results ofthis assessment are presented in this report . 

In this assessment, the response of HABOG in relation to the following topics has been evaluated: 

• Earthquake 

• Flooding 

• Extreme weather conditions 

• Loss of electrical power and loss of ultimate heat sink 
» Other extreme hazards: 

o interna! explosion 

o external explosion 

o interaal fire 

o external fire 

o airplane crash 

o toxic gases 

o large grid disturbance 

o failure of systems by introductng computer malware 
o interna! flooding 

• Severe Accident Management. 

It is noted that the ENSREG Stress Tests requirements vvere formulated for Nuclear Power Plant sites. It 
is therefore important to recognise the fundamental differences between a lovver potential hazard site, 
such as the HABOG (COVRA) site, and a higher potential hazard Nuclear Power Plant site. Given the 
nature of the HABOG (COVRA) site, and the relatively low level of hazard posed by the activities 
undertaken, this document therefore presents a proportionate response to the ENSREG Stress lests 
requirements. The report follows the suggested format for Stress Tests Reports, but is tailored as 
necessary where aspects are less significant or not applicable to the HABOG (COVRA) site. 

In genera! , consideration of the ENSREG Stress Test requirements has concluded that there are no 
credible fault scenarios or cliff-edge effects at the HABOG (COVRA) site for which there are no current 
adequate provisions. To increase robustness of the facility additional measures are proposed in relation to 
potential thrcatening weather conditions, the emergency plan, mobile monitoring equipment and loss of 
power. 



G'75 



23254/1 3«1 1871 2 



\ 



Introduction 

Following the accident at the Fukushima nuclear power plant in Japan, the European Council declared 
that "the safety of al! EU nuclear power plants should be reviewed on the basis of a comprehensive and 
transparant risk assessment (Stress test)", This review was later expanded to nuclear installations other 
than nuclear power plants. Based on this, the Ministry of Economie Affairs, Agriculture and Innovation 
(EL&I) requested COVRA N.V. to perform an assessment of the safety margins of the COVRA facility 
[1], based on the Belgian Stress test specifications as applied to their waste management faciüties and 
ENSREG specifications [2][3][4]. This request was implemented by COVRA N.V. as the 
«Complementary Safety margin Assessment', which results are presenled in this report. The approach of 
the 'Complementary Safety margin Assessment' as proposed by COVRA N.V. [5] has been approved by 
EL&I. The underlying report is in accordance with this proposal 

Scope 

In determining of the scope of the Complementary Saiety margin Assessment, the Belgian stress test 
specifications [4] for nuclear installations as applied to their waste management faciüties were followed. 
The Belgian Stress test states "buildings and installations needed to be considered are buildings where 
possihle criticality can occur and/or containing sufficiënt activity in case ofan initiating event with a 
resultmg accident scenario which may in theory give rise to a dose greater than 5 mSv outside the site *\ 

At the COVRA most of the radioactivity (> 99,9%) is contained in the HABOG. It is also the only 
building in which spent nuclear fuel is stored. Calculations showed that the worst possible accident 
scenario, concemed both design and beyond design accidents of all other buildings, results in a dose 
below the criteria of 5 mSv outside the site [draft Safety Report 2013]. The design based accidents could 
lead to a maximum dose of nearly 3 mSv, beyond design base accidents could lead to a maximum dose of 
nearly 4 mSv. From this follows that the scope of the assessment is deteraraing the complementary safety 
margins of the HABOG. 
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1 General data about site/plant 

1 .1 Brief description of the site characteristics 

HABOG, High level waste Treatraent and Storage Building, is located at the site of COVRA N.V. which 
is situated at the east of the cities Vlissingen and M iddelburg, as part of the industrial area 4 Haven-terrein 
Vlisskgen-oosf (see Figure 1.1). The site has an area of about 20 hectares. 




Figure LI Location of COVRA site 

HABOG is smrounded by several small and large companies on the industrial area 'Haven-terrein 
Vlissingen-oost'. The most notable company is the EPZ nuclear power plant (NPP) which is located at a 
distance of approximately 1 km to the south-east of HABOG. The distance to the city of Middelburg is 
about 8 km, to the city of Vlissingen about 10 km and to the smaller villages Borssele, 's-Heerenhoek and 
Nieuwdorp 2 to 4 km. 

On the south side is the estuary Westerschelde located. There is intensive shipping on the Westerschelde; 
the number of ship movements amounts to over 40,000 per year. Their origin or destination is, in many 
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cases, the port of Antwerp (Belgium). Included among these ships are transporten of dangcrous materials, 
including LPG, flammable liquids and iiquefied ammonia. 

HABOG is iocated approximately 7 km from the major A-58 highway (E312). The local road is 500 m 
from the plant (N254). HABOG is iocated approximately 300 m from the nearest (main) railway line 
which provides service to the locai ports and industries. A sideline from the main railway connects 
H AiKK i to the main railway line. 

The nearest airport, Midden Zeeland Airport, is situated at about 10 km to the north of the site. This 
airport is intended for smal! civilian aircrafts with a maximum weight of less than 5.7 ton. 

COVRA was founded in 1982 and since 1992 situated in Nieuwdorp, Zeeland; COVRA cmploys 57 
people. Beside the HABOG building the other buildings at COVRA site are; 

* Office building (kantoorgebouw - KG) 

* Radioactive waste treatment building (afval verwerklngsgehouw - AVG) 

* The low- and medium-level radioactive waste storage building (laag- en middelradioactief afval 
opslaggebouw - LOG) 

* Container storage building (container opslaggebouw - COG) 

* Depleted uranium storage building (verarmd uranium opslaggebouwen - VOG), 

De buildings of the COVRA site are shown in Figure 1 .2, HABOG is highlighted in orange. 
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Figure 1 2 The COVRA site wïth the HABÖG building 



1*2 Main characteristics of the facility 

In the center of the COVRA site the high-level radioactive waste treatment and storage building (Hoog 
radioactief Afval Behandetings- en OpslagGebouw -HABOG) is located (Figure 13). HABOG is 
designed for the treatment and storage of high-level radioacti ve heat producing waste (HPW) and non- 
heat produeing waste (non-HPW). 

The HABOG building consists of (Figure IA): 

* A reception area (A) 

* A preparation room (B) 

* An unloading and packaging room (floor above C) 

* Transport area (D) 

* Storage room (modular corapartments) for HPW (E) 

» Storage room (modular compartments) for non-HPW (F). 

Besides these areas, HABOG is equipped with a control room and several areas for auxüiary systems 
such as venting systems and energy supplies. 
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Figure 13 The HABOG facilïty 




Figure 1 .4 HABOG üoor plan 



The HPW, like irradiated fuel dements from Research Reactors (RR-HPW) and processed spent fuel 
(incorporated into a glass-matrix Le. vitrified) from the Borssele NPP and GKN (V-HPW), is stored in 
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vertical eylindrieal steel cantainments (wclls) which are cooled by natural conveetion, In Figure I A the 
three storage compartments for the HPW are located at the upper halfat the right side (indicated with E). 
It can be observed that four well-diameters are indicated. The smallest two diameters, the smaller for 
Standard canisters the larger for overpacked canisters, are used for vitrified waste (V-HPW). The larger 
diameters (the smaller for Standard canisters the larger for overpacked canisters) are used for RR-HPW. 
In case of any leakage or damage to Standard canisters, this canister can be overpacked into a large sized 
canister and stored in the larger well. No means are available to repair/overpack a damaged overpacked 
canister stored in the larger well (only possible after modifications). 

Waste with (very) low or no heat production is stored in the non-HPW storage. In Figure 1 ,4 the three 
storage compartments for the non-HPW are located at the lower halfat the right side (indicated with F), It 
can be observed in the figure that different canister sizes can be used, 

For safety reasons one of the three compartments for the HPW as well as the non-HPW must be empty, In 
case of inspection (access to the module can be for reasons of abnonnal/accidental situations) a 
compartment can be fully emptied by moving the waste to the third, empty compartment 

The waste in HABOG is continuously monitored by measurements and controls. 

Reception area 

The reception area is not part of the structure of the HABOG 
building and is only used for reception of the high-level waste 
and to transfer the waste container from the transport vehiele, 

The high-level radioactive waste is delivered in transport 
containers by road or by rail. In the reception area the 
containers can be stored temporary before further treatment 
After the shock absorbers of the transport container are 
removed (in case of Research Reactor Heat Producing Waste 
(RR-HPW)) and the container is checked, the container is 
hoisted by crane and loaded onto a trolley. The crane and the 
trolley are operated ioeally from inside the reception area. 

In Figure 1 .8, Figure 1 .9 and Figure ITO the reception area is 
Figure 1.5 The unloading of art MTO-2 container indicated in step 1 (RR-HPW) and step l and step 2 (V-HPW 
with research reactor fuel clements (RR-HPW) an( J non-HPW), 
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Preparation, unloading, packaging and transport 

The trolley with container is driven into the preparation room. The container is checked on tightness and 
the atmosphere is sampled. Subsequently the bolts of the container top cover are unscrewed (lid not 
removed). 

The transport containers are transported to the position. The top cover of the container is removed by 
crane. Subsequently the canisters or baskets (in case of RR-HPW) are hoisted out of the container. The 
baskets are hoisted from the MTR2 container into the Hot cell. 

The canisters are placed on an inspection table in order to check them visually, measure the radiation and 
contamination and check for the Identification number. After the inspection the canisters are ioaded onto 
a trolley in the unloading area. 

A part of the high-level radioaetive waste is treated in the packaging area. The RR-HPW baskets (the 
baskets are made from neutron absorbing boron steel plates) are hoisted out of the transport container in 
the hotcell and placed in a canister. This canister is closed, wclded, vacumised, filled with inert gas 
(Helium) and tested on leakage tightness. After packaging the canister is decontaminated in the 
decontamination area and transported to the unloading area. 

The canisters with HPW are Ioaded onto a transport trolley which is located at the front of the shielding 
door of the storage room (see Figure 1.6). 

The canisters with non-HPW are Ioaded via a hole in the floor onto another transport trolley. This transfer 
trolley is located in the transport area. The transport trolley is transported to the discharge position of the 
storage room (see Figure 1.7). 

In Figure 1 .8, Figure 1 .9 and Figure 1.10 the preparation and unloading rooms are indicated in step 2 and 
step 3 (RR-HPW) and in step 3 and step 4 (V-HPW and non-HPW). In Figure 1.8 the packaging room is 
indicated in step 3. In Figure 1.8, Figure 1.9 and Figure 1.10 the transport area is indicated in steps 4 and 
steps 5. 
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Storage room for heat producing waste 

HPW is stored in one of the three storage 
compartments (Figure 1.6). Several steel 
cylindrical wells are Iocated in each 
compartment for the storage of the canisters, 
Five canisters are stored on top of each other in 
each well. 

In Figure 1.8 and Figure 1.9 the storage room for 
HPW is indicated in steps 5. 




Figure 1 .6 Heat producing waste storage 



Storage room for non-heat producing waste 

The non-HPW (cladding material and vitrified 
waste from equipment for processing ofNPP 
spent fuel) is stored in one of the three storage 
compartments, see Figure 1,7 where one 
compartment is viewed by a camera. 

In Figure 1.10 the storage room for non-HPW is 
indicated in step 5. 




Figure 1 .7 Non-heat producing waste storage 



In the next three figures the three main processes in HABOG, handling and storage ofV-HPW, RR-HPW 
and non-HPW t are summarized 
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F igurc 1 ,8 Processing of RR-HPW. Step 1 : inspection of transport container and removal of shock absorbers; Step 2; unboiting 
of cover (lid not removed) and sampling for contamination; Step 3: RR-fuel is repaeked in storage eanisters, eanisters are 
cleaned; Step 4: inspection of eanisters; Step 5: storage in cylmder (weli) 




Figure IJ Processing of V-HPW. Step l; inspection of transport container; Step 2: positioning of transport container; Step 3: 
unboiting of cover (cover not removed) and sampling for contamination; Step 4; unloading of transport container and inspection 
of eanisters; Step 5: storage in cylmder (well) 




Figure 1.10 Processing of non-HPW. Step 1 : inspection of transport container; Step 2; positioning of transport container; Step 3; 
unboiting of cover (cover not removed) and sampling for contamination; Step 4: unloading of transport container and inspection 
of eanisters; Step 5: storage 
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Hoisting of canisters 

The canisters are designed for a drop height of 8 to 9 meter (depending on the type ofcanister). In 
HABOG the height of the hoisted canisters are minimised by use of a stepped floor (see Figure KI 1), For 
hoisting heights above the design drop height e.g. for storage in the weils, shock absorbers are used (the 
height between the canister and the bottom of the well is between 10 and 11 meter) to assure containment 
integrity in case of accidental drop. 




Figure IA\ stepped floor to non-HPW storage 



Main poteittial hazards of the facility 

HABOG is a treatment and storage facility for high-level radioactive waste. This radioactive waste is 
stored in robust steel containers (canisters) which are placed in robust storage rooms (1 .7 m thick 
reinforced concrete walls) with only passive safety systeras. The main potential hazards relating to the 
storage of the radioactive waste in HABOG are: 

* Release of radioactivity during fault conditions 

» Criticality arising from a fault condition. 
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1 ,3 Fundamental safety functions 

There are significant differences between the fundamental safety functions and support functions required 
for higher potential hazard NPP operations eompared with the lower potential hazards posed by 
operations at the COVRA site. For NPPs, the three fundamental safety functions are: 

* Control of reactivity 

* Fuel cooling 

» Confinement of radioactivity 
and the key support functions are: 

* Power supply 

* Cooling through the ultimate heat sink. 

The HABOG facility contants heat producing waste from or derived from spent reactor fuel. Decay heat 
removal systems are therefore still relevant for the HABOG facility despite of the fact that the decay heat 
from the heat producing waste is significantly lower than the amount produced in a NPP. The heat 
removal in the HABOG facility occurs in a passive way. Therefore, on the contrary to NPP's, the power 
supply is not a key support function for the HABOG facility, 

The three fundamental safety functions, control of reactivity, fuel cooling and confinement of 
radioactivity» and the key support function cooling through the ultimate heat sink are captured in the 
following three safety functional requirements: 

* Prevent criticality 

* Prevent loss of cooling 

* Prevent radioactivity release. 

HABOG design considers initiating events from both nataal and man-made extemal hazards, including 
seismic, extreme weather (including flooding), gas cloud explosion and aircraft crash. Safety measures 
are identified based on the possible consequences, including those arising from the potential for 
criticality, loss of cooling and radioactivity release. 

The assessment of risks for HABOG considers those arising during nonnal operations and fault 
conditions through a systematic identification and assessment process. The overriding objective for the 
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safety ofHABOG is the elimination of hazards, by designing in inherent safety. Where this is not 
practicable, suitabte and sufficiënt safety measures are identified to deliver the safety fiinction following 
an initiating event. 

Engineered Structures, Systems and/or Components (SSC) are employed to deliver the safety funetions 
wherever practicable together with robust procedural controls. There is adequate redundancy to 
accommodate single random failure and to minimize the likelihood of dependent failures. The design of 
plants, processes and operations is based on appropriate lcvcls of defenee in depth including diversity and 
physical separation. 

1 .3.1 Reactivity contrei 

In HABOG spent fuel is stored. Unlike NPPs, which require shutdown mechanisms to achieve sub- 
criticality, the safety aim during treatment and storage is to never achieve critical conditions. In fact under 
all credible conditions, systems shall remain subcritical by a fair margin. 

Criticality is only an issue for storage of spent fuel or spent fuel containing waste. The conditions for 
criticality are a combination of: 

* Available mass of radioactive material 

• Enrichment percentage of the radioactive waste 

* Geometrical conditions 

• Presence of a moderator like water, hydrogen or carbon. 

The following applies for the HPW in HABOG. Even in the presence of a moderator (like water) the 
effective multiplication factor keft is always beiow the criticality safety criterion of 0.95, due to a 
prescribed storing geometry. So for accident situations whereby water replaces the inert gas in the HPW 
wells as well as in the RR-HPW canisters, criticality does not occur (anaiyzed by ECN/NRG). 

1 .3.2 Coolïng Requirements 

Due to the storage of heat producing waste (Figure 1,12), decay heat removal systems are necessary for 
HABOG. Howcver, the decay heat at the OOVRA site is significantly lower than the amount produced in 
aNPP. 
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Figure 1 .12 Storage of heat producing waste and non-heat producing waste 

The ventilation system of HABOG consists of a natural convection system for the cooling of the heat 
producing waste (Figure LI 3) and a mechanical ventilation system for the ventilation of the other 
treatment and storage rooms, The mechanical ventilation system is not necessary for cooling but mainly 
for ventilation and filtering of the air, The mechanical ventilation does not support the cooling safety 
fimction of the HABOG facility.To maintain the storage of the heat producing waste within the safety 
boundaries, Le. below the limit temperatures, cooling by natural convection of the heat producing waste is 
required. 
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Figure U3 Natural convectïcm systcm for the cooling of heat producing waste 

The natural eonvection system is designed in such a way that the maximum allowable temperatures of the 
heat producing waste and construetion materials are not exceecled during normal operation, malfunetions 
or accidents. The maximum allowable temperatures are shown in Table 1 . 1 for nomial operating 
conditions and 

Table 1.2 for accidental conditions. 



Table 1 . 1 Limit teniperatures for storage of HP W for normal operating conditions 





Limit temperature (°C) 


V-HPW (in center canister) 


500 


Fuel element (eladding) 


250 


Concrete construction 


95 (locally 105) 


Table 1.2 Limit temperatures for storage of HPW for accidental conditions 




Limit: temperature (°C) 


V-HPW (in center canister) 


610 


Fuel element (eladding) 


425 


Concrete construetion 


180 



The maximum occurring temperatures in the storage room are calculated with a validated model The 
results for the V-HPW are given in Table 1 .3. The results show that the calculated temperatures are lower 
than the specified limit temperatures in lable 1.1. Due to conservative assumptions (like intake air 
temperature) and decrease in heat production due to decay, temperatures in the storage room/HPW are 
lower in practice. 
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Table 1 3 Maximum temperatures tbr V-HPW waste during storage (decreasing in time due to decay) 



Temperature (°C) 



Intake Air 



27 



Casing pipe 

Containment (steel cylinder) 
V-HPW (in center canister) 
Exhaust Air 



460 



180 



56 



97 



Concrete construction 



78 



Similar calculations are performed for fuel element temperatures (RR-HPW). The calculations show that 
the fuel element temperatures are lower than the specified limit temperatures in Table 1.1. 

Calculations show that even with a 95% blockade of the air Met, the maximum temperature for normal 
conditions, Table IJ, of the V-HPW is not exceeded. Even in case of a full blockade of the air inlet, 
temperatures stay below limit temperatures for normal operating conditions for a long time (several 
months» estimation based on KEMA calculations). The situation of a ftilly blocked air inlet for a long 
period can be considered as highly unrealistic. 

1 .3.3 Confïnement of Radioactivity 

In the HABOG facility high-level radioactive waste is stored and separated from the environment. For the 
confinement of radioactivity of the high-level radioactive waste there are several containment barriers, as 
described below. 

The spent fuel of the KCB is recycled in France and the remaining fuel material is immobilized in a glass 
matrix (V-HPW). The spent fuel from research reactors is delivered in baskets. The aluminum cladding 
forms the solid matrix for this type of waste (RR-HPW). The mentioned matrices form the ftrst 
containment boundary. This immobilized waste is stored in canisters, forming the second containment 
boundary (Figure LI 5). The RR-HPW canisters are fffled with an inert gas (Helium). The third 
containment boundary is formed by the cylmdrical steel weils (Figure KI 4) in which the canisters are 
stored; in total five canisters can be stored in one welL The wel! is locked with a shield plug and fiiled 
with an inert gas ( Argon) to protect the canisters from corrosion. The integrity of the canisters and wells 
are periodically tested by gas detection measurements. 
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Figure 1 , 14 Cylindrical wells for storage of HPW (scale model) 




Figure 1.15 Canister tbr V-HPW 

The non-heat producing waste, mainly cladding material from NPP fuel and used equipment for waste 
processing, forms a solid matrix. The non-HPW is stored in canisters, forming the first containment 
boundary. These canisters are placed in ventilated and filtered compartments ofHABOG which serves as 
a second containment. The mechanical ventilation system is designed in a way that the air flows from 
(potentially) less or non-contaminated areas to (potentially) more contaminated areas. The ventilated air i; 
filtered before it is released. 
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For a (significant) release of radioactivity to occur following severe damage, one or more of the following 
wouid need to occur: 

* Significant damage to canisters to cause release (for both waste types) 

* Significant damage to cylindrical wells (for HPW) 

* Significant damage to ventilation and monitoring systems (for non-HPW). 

1.3.4 Power supply 

The power supply system is important for HABOG operations but provides no support to nuclear safety 
functions. All systems required for supporting the safety functions have a passive safety design. All otter 
processes are designed to shut down in a safe manner following loss of power. 

HABOG is connected to the lOkV external grid via a transformer. There are separate mam distribution 
rails for the norraal and essential power supply. These distribution rails are physically separated. 

When a single electricai sübsystem fails, power can be supplied by connections with other power supply 
(sub)systems to provide power to the essential parts of the installation. in case of loss of ofF-site power 
(10 kV) or a failure ofthe transformer, the emergency power supply system (emergency diesel generator) 
delivers the electricity required for the essential power supply for HABOG. 

In the transitions to emergency power supply the normal power supply is disconnected from the lighting 
and other normal electricity users. The essential users are subsequently connected to the distributor of the 
emergency diesel generator. 

The electricai installation is provided with a static no-break installation for the uninterrupted power 
supply (UPS) of measurement and control systems. The UPS has a capacity sufficiënt for 5 hours. 

1 .4 Scope and main resulfs of Probabilistic Safety Assessments 

No PSA has been carried out for HABOG. A risk evahiation of HABOG is currently under development 
as input for the new Safety Report. It is anticipated that this risk evaluation will show that the Dutch risk 
criteria will be fulfilled. 
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i2! IEE c3 r*t h c*j u ci I*cc3 s 

2.1 Design basis 

2.1.1 Earthquake against which the plant ïs designed 

The area of the Netherlands has lovv seismic activity. Most activity is located in the south-east part, as can 
fae seen in Figure 2.1 where the size of the spots indicate the magnitude of historie earthquakes 




ttü zo® 300 



Figure 2.i Earthquakes in the Netherlands in the period 1904-2004 
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(yellow spots indicate induced seismic activities, the dark red spots indicate tectonic activity befcre 1980 
and light red spots indicate tectonic activity after 1980). It can be observed in the figure that in the last 
century no seismic activity took place in the region of Vlissingen. The highest carthquake intensity ever 
recorded in the area near this region is VVi MMI (Modified Mercalli Intensity), caused by the earthquake 
vvith a magnitude of 5.6 on the Richter scale nearToumai, Belgium on June 11, 1938. 




Figure 2,2 Seismic zoning map in EMS (left) and PGA (right) 

The COVRA site lies in a zone with low seismic potential. In Figure 2.2 seismic zoning maps for the 
Netherlands are shown for tectonic seismicity with a 10% probability of exceedance in 50 years (return 
period 475 years), given in European Macro-seismic Scale (EMS) and converted into peak ground 
accclerations (PGA), The indicated PGA zones have the following values: 

• Seismic Zone A: PGA = 0.10 m/s 2 (0,010 g) 

• Seismic Zone B: PGA = 0,22 m/ s 2 (0.022 g) 

• Seismic Zone C: PGA - 0.50 m/ s 2 (0.050 g) 

• Seismic Zone D: PGA = 1 .00 m/ s 2 (0. 1 00 g). 

These PGA values occur not at ground level, bul at the interface between the Holoceen and Pleistoceen 
geological layers. 

According to this categorisation the COVRA site falls into seismic zone B, which means that a PGA of 
0.022 g could be applicable to this region. 
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Conceming induced earthquakes it can be concluded that no induced earthquakes have taken place nor are 
they to be expected because no oil and gas extraction takes places in this region. 

Site speet fies 

In the recent geological epoch, the Holocene, in the westera part of the Netherlands deposits occurred 
which can be tens of meters thick in the coastal areas. In Walcheren and Zuid-Beveland the surface 
sediment exists of"young clays and sands". As a result oftidal movements, which had effect before 
embankments took place, there is also a relatively low reliëf of 1 to 1 .5 m. 

The topsoil of the site consists of raised sand, Underaeath is a thin layer ofclay, which formed the 
previous cultivation layer. Below is a mixed package ofsand with various kinds of layers. At a depth of 
about 22 m -NAP to 28 m -NAP, a very dense sand layer is present. 

Research that was conducted by Delft Gcotechnics for the location shows that the maximum intensity in 
the area around the location could be approximately VV/ 2 on the Mercalli scale. The corresponding 
horizontal (free field) peak acceleration is about 1 m/s 2 (0.1 g), the concurrent vertical peak acceleration 
amounts to 2/3 of the horizontal acceleration. The probability of this type ofearthquake is 10 6 per year 
(so a return period of a millión year). The probability per year of exceeding horizontal peak accelerations, 
applied to the COVRA site, is given in Figure 23. The motion duration for the different types of 
earthquakes (accelerations) is less than 5 seconds. 
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Figure 2.3 Probability of exceedancc per year (X~axis) vs. horizontal peak acceleration (Y-axis) 

The occurrence ofpossible liquefaction at the HABOG site is evaluated by Delft Geotechnics (1996, as 
part of the Dynamic Geotechmcal Analysis of the Detailed Design by HBM-HBW). The final conclusions 
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of this evaluatïon "with respect to üquetaction are that this is unlikely to occur, and that any geotechnica] 
effect will be harmiess for the structure" 

For the construction of HABOG soil improvement has been applied. The terrain has been excavated up to 
about 0.5 m + NAP. This soil was a mixture ofciay and sand, The excavation has been ffiled up with sand 
up to a ground level at approximately 5.6 m + NAP, Due to this the surfaee is considered as sufficientty 
stable. 

Design reqmrements 

The HABOG facility, more speeific the building and safety relevant equipment and infrastructure, is well 
designed against earthquakes. HABOG is designed for a PGA of 1 m/s 2 (or A g; this value is indicated 
as the Design Basis Earthquake (DBE)) and meets the Dutch requtrement NVR 3.1 . NVR 3/1 requires: 

* design against the maxiraal ground mo vement at the site with a probability of 1 6 per year 

* development of a site response spectrum based on local geologicai information 

* no building on fractures in earth layers below the buildings 

* maintaining the fundamental safety functions in case of oceurrence of the maximal ground 
movement. 

In addition to the design criteria according to NVR 3.1, the loading capacity and stability of the building, 
with the exception of the reception area and the stack, are ensured. The latter are designed according to 
the current NEN standards (NEN normen). The stack has a break point which, in case of a break, results 
in an acceptable stack height regarding thermal aspects. 

2.1 ,2 Provisions to protect the plant against the design basis earthquake 

The planfs protection against earthquakes is based on defence in depth. The first level of defence aims at 
preventing the challenge to the building and (safety) systems due to earthquakes. This prevention is firstly 
established by proper site selection. As described above, the site is characterised by a veiy low seismicity. 
Secondly, prevention is provided by an engineered design of all SSCs supporting normal and emergency 
operation herewith maintaining the fundamental safety functions. For preventing radioactive release, loss 
of cooling and criticality (safety functional requirements, see chapter 1), the following provisions for 
earthquake protection, are foreseen: 

* Confinement: the waste has several confinement layers starting with the waste matrix (all solid), 
package, storage containment (e.g. cylinders) and building (wall thickness: 1 .7 m), The canisters 
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are well designed against external forces to prevent loss of integrity. Therefore, the integrity fbr 
the canisters are ensured for a drop height of 8 to 9 meter. 

The transport containers for road and rail transport meet the requirements of the ADR (European 
convention concerning the transport of dangerous goods over land) and the IAEA T3-R-1 . The 
containers are designed to withstand severe conditions that are postulated for rail and road 
transport (such as high temperaturcs and high impacts), A transport container can withstand 
temperatures of 800°C for at least 30 min and a drop height of at least 9 m (in practice it turns out 
to be much more, e.g, for a type TN1 7/2 container much more time, -6 hour, at 800°C or 
container drop height, -30 meter, is necessary to damage the container in a way that radioactive 
releases are possible). 

* Cooling: natural convection via air Mets in the building. The building is designed for earthquakes 
occurring once per million years (DBE). After occurrcnce of a DBE, structures, systems and 
components will be intact. The passive cooling system will function because no blockage or 
(relevant) damage to air openings will occur. The stack is only designed according to current 
NEN standards (NEN normen). Damage to the stack does however, also due to the designed 
breakmg points, not threaten the passive cooling and does not threaten the main concrete 
constructions. 

♦ Criticality : due to the design of the waste matrix, the amount of waste per package and the 
packaging materials and dimensions, subcriticality is ensured for the waste stored in HABOG, 
Possible effects of an earthquake, for instance falling of canisters or denting, will not have an 
effect on the subcriticality level in the waste, 

The functions maintaining nuclear safety in HABOG are all passive. No support (for instance electricity 
or water) is needed to maintain these functions. However, electricity is needed for monitoring and control. 
In case of loss of off-site power (LOOP) due to an earthquake, emergency power will probably take over 
control of relevant systems like ventilation, room monitoring and, when necessary, hoisting equipment. 
The emergency power equipment is not formally seismic qualified, however, all emergency power 
equipment/parts are secured to the floor so the system cannot be damaged by falling parts. 

Loss of power is further described in chapter 5. 

2.1 .3 Compliance of the plant with ïts current licensing basis 

HABOG compliance with its current licensing basis is laid down in the Safety Report (VR). HABOG has 
a maintenancc system and operating procedures to ascertain the proper functioning of structures, systems 
and components. The safety settings are included in the Technical Specifications. 
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No specific raeasures and procedures exist for earthquake situations, nor are these deemed necessary. As 
there are no procedures and processes to deal with earthquake situations, there are no procedures that deal 
with mobile equipment and supplies that are planned for use. 

2.2 Evaluation of safety margins 

2.2.1 Estïmation of safety margin against earthquake 

For IIABOG neither a seismic PS A nor an explicit Seismic Margin Assessment has been performed in the 
past, A qualitative evaluation of the seismic margin is described below. 

A seismic margin of a facility or plant is generally understood to be the capabiiity to withstand seismic 
loads exceeding the design basis. If these margins are to be expressed quantitatively, it is necessary to 
describe the facility's seismic capacity in terms of representative ground motion parameters. The use of 
the peak ground acceleration (PGA) as a characteristic ground motion parameter found the widest 
apptication and is also used for HABOG seismic evaluation. 

The following describes the approach to seismic design and consequential uncertainties: 

• The seismic capacity cannot be expressed easily as a discrete figure since there are various 
sources of variability (due to randomness and uncertainty). It is common practice to express the 
seismic capacity either as median seismic capacity A m , i.e. the 50-percentile of the variability 
distribution, or as HCLPF (high confidence low probability offailure) capacity. The HCLPF thus 
represents the peak ground acceleration at which the probability of seismic induced taïlure level 
is low (< 5%) at high confidence (= 95%). HCLPF values can be elaborated for individual SSCs 
but also for safety ftmctions and the entire facility. Often there are different success paths 
ensuring a safety function (the seismic capacity of a safety function is then determined using the 
MIN-MAX rule: the minimum seismic capacity of the SSCs required in each success path is first 
derived, then the HCLPF capacity of the safety function is given by the maximum capacity of 
each success path). 

» Choice of ground motion characteristics: ground floor response spectra used in the verification 
study of the seismic adequacy are design spectra, i.e. the spectra have been subject to smoothmg 
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and broadening. In particular, this introducés a substantial artificial increase of energy content of 
the excitation. 

* Conservatisms in deterraining the seismic demand: earthquakes induce oscillations to a chain of 
different oscillators at a site, starting trom the soil, the base plate and the upper floors of buildings 
up to smaller pieces of equipment. These different osciilatmg sub-systems show more or less 
significant interaction effects. For exampie t the heavy weight of the HABOG building has a 
damping effect on ground oscillations, Similarly heavy equipment installed inside dampens the 
vihratiom of the supporting floors. A realistic deseription of this complex oscillation behaviour 
would therefore require modelling the entire system and considering nonlinear effects as well, 
such as plastic deformation. 

* Conservatisms in determining the resistance to seismic loads: e.g, application ofsafety factors 
following the relevant codes, use of conservative material properties, neglecting plastic 
deformation capability. 

Due to application of several conservatisms in the seismic design of the SSCs of the HABOG facility, the 
seismic capacity is expected to be (much) higher than expressed by the DBE. The HABOG building has 
very thick (1 .7 m) reinforced concrete walls. When exceeding a DBE only limited damage to SSCs may 
occur. The possible consequences for the fundamental safety fimctions are described below. 

Confinement of radioactivity 

Due to the Beyond Design Basis Earthquake (BDBE, exceedance of DBE), canisters for Non-Heat 
Producing Waste (non-HPW) may fall onto the ground. The canisters are well designed against exteraal 
forces and integrity of the canisters will not be lost due to such a fall, and the confinement layers stay all 
intact. After the earthquake, enough time is available to restore or, when deemed necessary, repack the 
canisters, Inside the HABOG building enough (no power using) equipment is available to replace dropped 
canisters so they can be inspected, operated and restored. 

The non-HPW canisters are not fixated between walls or other solid borders. So the canisters cannot be 
crushed due to moving walls caused by an earthquake. 

For the Heat Producing Waste (HPW), the cylindrical wclls may be damaged after a BDBE, possibly 
leading to escape of inert gas (Ar) which is inside the cylinders. The integrity of the canisters wil] not be 
lost. After the earthquake the canisters can be removed and stored eisewhere (in the unloading room a 
storage well for canisters is available; a canister can also be stored in a transport container). The third, 
empty, compartment may be used to store canisters from damaged wells. 
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It is possible that parts of the ventilation systems are damaged or due to failure of emergency power 
ventilation have stopped. Consequences are a very slow build-up ofnoble gases, hydrogen gas and 
possibly some aerosols in the non-HPW storage room. Due to the loss of under-pressure in the storage 
room, these substances will spread slowly over other rooms in the building. Possible cracks in the 
building walls (due to the BDBE) are expected to be minor, and will not result m an open connection to 
the environment. 

When operating welding activities during a BDBE in the hot-ceil, damage to the welding equipment 
could be expected. Assuming damage to this equipment, the unfinished cover of the canister is not gas 
tight, so the fuel matrix is in contact with the hot-ceü environment. The radioactive material is however 
still confined by the hot-cell and HABOG building. After the earthquake enough time is avaiiable to find 
solutions for finishing packaging activities (e.g. overpacking). 

The reception area may be significantly damaged. Parts of the 18 meter high roof may feil on a transport 
container. Compared to the impact of a container drop from 9 meter height, the limited mass of falling 
roof parts will not significantly damage the transport container (Le. no damage causing a release of 
radioactive products). 

Cooline of the waste 

Cooling of the HPW is ensured by natural convection, The stack may be damaged after a BDBE. A study 
of KEMA has shown that blockage of the air ducts of 95% (so 5 % ofthe air passing area is avaiiable), 
cooling is still sufficiënt and normal teraperature limits are not exceeded. Even in the case of a fuil 
blockade ofthe air inlet, temperatures stay below limit temperatures for normal operating conditions for a 
long time (several months, estimation based on KEMA calculations). So confinement ofthe V-HPW is not 
threatened by blockage of the air inlet. It can be remarked that it is not reatistic that the air inlet will be 
fally blocked, or even blocked at all, for a period of several months, 

Control of Reactivity 

The subcriticality level is not threatened by the BDBE. This is due to the tact that serious damage to 
canisters is not expected. 

Conchman 

Due to application of several conservatisms in the seismic design ofthe SSCs ofthe HABOG facüity, the 
seismic capacity is (qualitatively) estimated to be (much) more than expressed by the DBE. Exceedance 
of the DBE may result in small damage to SSCs, but will not threaten the fundaraental safety functions. 

It can be concluded that an extreme earthquake does not lead to cliff-edge effects. 
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2.2.2 Earthquake exceeding the design basis earthquake for the plant and consequent 
floodfng exceeding design basis fiood 

In general, an earthquake at sea may cause a tsunami, which in turn may cause a flooding. In this case, a 
tsunami formed in the North Sea will not grow to high amplitudes, due to the relatively shallow water. A 
tsunami formed at greater depth at sea must travel a far greater distance through e.g. the North Sea or the 
Street of Dover to reach Vlissingen-Oost which will deerease its amplitude to a negligible magnitude. See 
chapter 3 for more information on tsunarais. 

In conclusion, a beyond design basis earthquake is not expected to iead to extemal flooding of the 
COVRA site, 

2.2.3 Measures which can be envisaged to increase robustness of the plant against 
earthquakes 

The occurrence of earthquakes exceeding DBE is highly unlikely (< 10"* per year). Taking this into 
account in combination with the limited consequences when exceeding the DBE, no measures are 
proposed to i ncrease robust ness of the facility. 
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3 Flooding 

This chapter describes the outline of the analysis of the COVRA site with respect to flooding eonditions. 
The flooding eonditions considered are inundation hy the "Westerschelde", which covers flooding due to 
extreme rain falL 

3.1 Design basis 

3,1.1 Flooding agaïnst which the plant is designed 

Not ali parts of the Netherlands are above sea level. This can be observed in Figure 3.1, where the colored 
parts indicate the height level below or above NAP {Normaal Amsterdams Peil an indication of the mean 
sea level). Green parts show the regions below NAP, the yellow/brown parts show the regions above 

NAP. The red circle (in the south west) 
indicates the location of the CO VR A 
site. It can be noticed that the site lies 
in a region just above sea level (yellow 
color). 

However, the COVRA buildings, 
including HABOG, have a ground 
floor level at approximately 5.75 m + 
NAP, The level of the site area is 
approximately 5.60 m + NAP. The site 
is located outside the dikes. 

Nuclear Base Level (NBP) 
In 1980, the Nuclear Base Level (in 
Dutch: Nucleair BasisPeil, or NBP) 
was introduced. The NBP resutts from 
the requirement that a nuclear facility 

should be protected against external 
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hazards in such a way that the probability of an accident with serious consequences caused by external 
events - in this case floods - will be small compared to the risk of serious accidents originating from 
mum whhin the facifity itself. This requirement is met üf the safety raeasures are such that an external 
event with a return period of 1 million year (frequency of 10 6 per year) can be withstood. The NBP is 
determined for the loeation Vlissingen-Oost at 6.75 m + NAP. 

Nuclear design level (NOP) 

For flood-resistant design of a nuclear facility, a nuclear design level is obtained by adding various factors 
to the NBP, as defined in the regulations of the IAEA. The resulting level (NBP + factors) is the 
ealculated nuclear design level (in Dutch: Nucleair OntwerpPeil, or NOP). The NOP for the HABOG site 
is defined as the NBP, with the addition of the following: 

* Compensation for rising sea level : + 0.66 m 

* Local wind effects : + 0.75 m 

* Long waves (Seiches): + 0.30 m 

* Wave top size: 4* 1 .50 m. 

The resulting NOP is therefore 9.96 ra + NAP. HABOG, more specific, the non-HPW, HPW storage 
rooms and unloading/packaging room, is designed for this flood level This means that the reception area, 
the preparation room and transport area can he flooded at a lower level (from +5.75 m NAP), 

Tsunami 

In a study carried out in 1 993, it was concluded that a hypothetical tsunami would result in a maximum 
elcvation of the water level of 1 .4 m along the Dutch coast. Based on this conservative assumption, the 
risk offlooding due to a tsunami is regarded as non-existent, because a tsunami combined with the most 
extreme recorded storm surge (4.7 m + NAP, 01/02/1953) would result in a water level of 6.1 (1.4 + 4.7) 
m + NAP» which is still below the NOP of 9.96 m+ NAP [6]. 

This conclusion is supported by more recent research. In 2007 a study concluded that Cuxhavcn (German 
Bight) is protected from the catastrophie impacts of a hypothetical tsunami of 0.5 m. As far as the Belgian 
coast is concemed, research concluded in 2005 that a hypothetical tsunami will not grow to an amplitude 
of several meters but to a maximum of 0.7 m 3 due to damping in the relaiivety shallow North Sea. This 
makes a tsunami, in the first approximation, of the same order as the 1953 storm surge. Therefore it was 
concluded that the Belgian coast, indudmg the Westerschelde, is at a lower risk of a potential tsunami 
compared to other extreme meteorological effects, This conclusion was confirmed in a recent benchmark 
with NPP Doel (Belgium) [6]. 
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Extreme rainfall 

Heavy rainfall may cause flooding. The average annual rainfall between 1961 and 1990 was 731.2 mm, 
Statisties from the KNMI show that, for the area of Vlissingen-Oost, 1 08 mm of rainfall can be expeeted 
within a period of 24 hours once every thousand years (1 3 per year). Under the same conditions, 123 
mm of rainfall can be expeeted within 48 hours. In the climate scenarios given in KNMI '06, the worst- 
case scenario of expeeted rainfall within 24 hours by the year 2050, predicts an increase with 19 mm. The 
largest amóunts of rainfall within 24 hours measured in the vicinity of the COVRA site in the period 
1951-2010 were approximately 81 mm at Vlissingen and 93 mm at Schoondijke. 

For the site to flood up to a level of NOP an unreaiistic amount of rainfall (thousands of itim's) would be 
required. Therefore, based on the statisties mentioned, such an event is not considered credible. The 
influence of extreme rainfall on the integrity of structures of the facility is treated in Chapter 4, Extreme 
Weather. 

Soil surf ace HABOG site 

When the site area is flooded the risk exists of erosion (due to the passing water and waves) of the soil 
surface surrounding HABOG. Soil erosion can cause instability of the foundation due to under-flushing. 
A study of Rijkswaterstaat (1993) showed that the protection of the soil surface around the building by 
gravel/stone or turf is sufficiënt to prevent under-flushing of the HABOG building. The turflayer is 20-30 
cm thick. 




Figure 3.2 Turf and stonc surrounding the HABOG building 



Conclusion on the adequacy of protection against external flooding 

HABOG is designed for flooding for the nuclear design level of 9.96 m +NAP. For this level the 
probability of flooding is 10~ 6 per year. The design level for flooding takes into account the effects of sea 
level rise, local wind and wave effects. 
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The soil surface around the HABOG building is capable of preventing the building for uncier-flushing, 

3.1 .2 Provisïons to protect the plant against the design basis f lood 

The SSCs and provisions are sufficiënt to maintain the three fundamental safety ftmctions conftnement, 
eooling and sub-criticality in case of at least design basis flood (NOP, 9.96 m + NAP), 

The concrete constructions of HABOG are designed to prevent the waste for water contact by ground 
water and inundation for a flood level of at least 9.96 m +NAP (NOP). The storage room for uon-HPW is 
protected for a flood height of 1 0.75 ra +NAP, which is indicated (room 1 1 8) in the left part of Figure 3.3. 
The HPW (room 121) is protected for a flood height of 1 3.25 m +NAP due to the height of the inlet of the 
passive air eooling, indicated at the right part of Figure 3.3. The contrei room is located at a height of 
1 5.27 m +NAP, the floor of the emergency power equipment at a height of 10.47 m + NAP (not indicated 
inFigure3.3). 

In Figure 1 ,8, Figure 1 .9 and Figure 1.10 cross-sections of the HABOG building are given showing the 
processing of respectively RR-HPW, V-HFW and non-HPW. In step 2 and 3 of the RR-HPW process the 
waste is unloaded and repacked. In step 3 and 4 of the V-HPW and non-HPW process the transport 
container is unloaded. The rooms in the mentioned steps are provided with redundant drives (e.g. for 
hoisüng equipment) and emergency equipment to store waste (including unfmished repacked waste) in 
safe and shielded positions in case of failures or power outages, caused by malfunctioning or 
internal/external events (for instance the consequences of flooding). 

As a preventive measure (not formalized in procedures), unloading and repackaging activities can be 
cancelled/finished when weather forecast predicts threatening conditions to the site. The HABOG 
organization is informed by the SVSD service when these conditions may occur. The SVSD service 
(stormvloedwaarschuwingen kust en benedenrivieren) is a cooperation between the department water 
management of the Ministry of Infrastructure and Environment (Rijkswaterstaat) and the Royal Dutch 
Meteoroiogical Institute (KNMI), In general, there will be enough time to finish ali activities and have the 
waste stored in the cylindrical containers (HPW, step 5 Figure 1 .8 and Figure 1 .9) and the storage 
compartment (non-HPW, step 5 Figure 1.10). 
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3.13 Plant compliance with its current licensing basis 

HABOQ has its own maintenance system and operating procedures to ascertain the proper ftmclioning of 
structures, systems, and components, No spccific measures and procedures exist for external flood 
situations (i.e. nol for design basis flood as vvell as beyond design basis flood). 

As there are no procedures and processes to deal with flooding situations, there are no procedures that 
deal with mobile equipment and other supplies. Due to the design of the HABOG building, its tacilities 
and its passive safety features, mobile equipment and other supplies are deemed nol necessary. 

3.2 Evaluation of safety margins 



3,2.1 Estimation of safety margin against flooding 

In seclion 3.1 .1 it is evaluated that a flooding abovc NOP is very unlikely to occur. However, tbr the 
evaluation of safety margins in this section severe flooding is postulated. 

The three fundamenlal safety functions are evaluated for flood levels beyond NOP. At this water level the 
building will be floodcd. The water enters the building via openings in the building e.g. frdm doors and it 
is assumed that it will spread out in the rest of the building. Water also enters the air inkt. The (uttimate) 
consequences of water entering the HABOG building are described below. 

Failure of electricity siipply 

For this flood level failure of the (emergency) electricity supply is assumed. When normal electricity 
supply rails, essential electricity users Uke monitoring and control equipment are aulomatieally fed by 
emergency power, equipped with static no-break sets (see section 5). When emergency power fails, all 
support systems fail. For the fundamental safety functions this means the following: 

• Conflnement of the waste. The confinement of the waste is not influenced by electricity. As a 
result of loss of emergency power, the ventilation system fails and very small amounts of 
radioactive materials (Uke noble gases) could spread over the building. Due to tailurc of 
monitoring equipment it is not posstble to have actual data about radiation levels in the 
compartments or support rooms. 
• Cooling of the waste. The passive cooling system is not influenced by electricity supply. 
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Criticality safety. Failure of eleetricity supply does nol influence sub-criticaltty in any possible 
situation in UABOG. 

Flooding of the compartmmts 

It is assumed that the water wil! tlood the storage compartments and the repaekaging room. For the 
fundamental safety funclions this means the following: 

Confinement of the waste. The waste is separated from the environment by several, waterproof, 
layers. For the HPW the hamers are the immobilized waste (the glass matrix and fuel matrix), a 
canister in whtch the immobilized waste is placed and the cylindncal wclls in whieh the canisters are 
placcd. 

For non-HPW, the canisters are stored in the storage room. The integrity of the canisters is not 
Ül£g^_ enccl by water contact, but water migh t penetrate into the narrow Poral filters (filter 

performance: 99.9% filtratton of partiele sizes down to 
4.5 gm for iiquid and 0.5 pm for gas) in the cover of the 
canister as presented in Figure 3,4. Although it is very 
unlikely that large amounts of water will penetrate into 
the canisters, within the scope of this it is assumed that 
| the canisters will be filled with water. Whcn the external 
tlood levcl decreases belovv NOP, the water (in potential 
Figure 3.4 Poral filter in the over of a canister not or vcr > less contaminated or activated) can be 

pumped out of the storage room. Due lo the heavy 
weight and positioning of the canisters, it is not expected that canisters have been tilted during 
flooding conditions. The canisters, assumed to be filled with water and non-HPW, do not form a 
potential threat to the environment. When retumed to normal external conditions there will be enough 
time for evaluation of the assumed situation of the waste storage. In principal, the water in the 
canister will evaporate and escape via the Poral filters. The same applies for formed gases (e.g. as a 
result of radiolysis). 

Due to the weather forecasts mueh time is available before significant flooding oceurs at the site, 
therefore it is not expected that transport containers will be present in the reception area during this 
event. Transport containers are leak tight according to the requirements of the ADR and IAEA 
TS-R-l. 

• Cooling will take place by the entered water in the storage vault. The heat capacity of water is rauch 
larger than of air and temperature rise of the cooling water in the vault will be very slow due to the 
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large water mount. The water transiers the absorbed heat to the environment by evaporation and heat 
exchange with the walls. 

• Criticality safety has been investigated for foundation of the compartmettts, wells and canisters 
(referring to accident conditions, the cylindrical welis and canisters are gas- and waterproof). For the 
wells and canisters, réspcctively Argon and Helium gasses are replaced by water. Water is an 
effective moderator, so criticality can increase when air, Argon or Helium are replaced by water. 
Calculations by ECN/NRG showed criticality safety under these conditions using conservativé 
parameter assumptions and waste type combinations. 

In the ahove a qualitative description is given concerning the fundamental safety fünctions when the flood 
has rcached above the design tevd. Due to the fact that no (significant) radioactive releases occur within 
these conditions, further safety raargins are nol relevant for this event, which leads to the conclusion that 
extreme flooding does not lead to clifi-edge effects, 



3.2.2 Measures which can be envisaged to increase robustness of the plant against 
flooding. 

The preventive measures which may be necessary in case of potential threatening weather conditions can 
be formalised in procedures. 
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4 Extreme weather conditions 



4,1 Design basis 

This chaptcr describes the design basis of HABOQ with respect to extreme weather conditions. The 
foüowing weather conditions are taken into account; 

• extreme high and low air temperatures 

• extremely high wind (including storm and tornado) 

* wind missiles and hail 

• heavy rainfall 

• heavy snowfall 

* formation of ice 

* lightning 

* credible combitiatlcms of the conditions menticmed ahove. 



4.1 .1 Reassessment of weather conditions used as design basis 

The data on extreme weather conditions is collected at the KNMI weather station at Vlissingen [7], The 
data is collected between 1 906 and the present. 

Extreme high and low air temperatures 

The maximum air temperature measured is 35.5 °C on 19-07-2006. Accordïng to the Intergovernmental 
Panel on Climate Change (!PCC) a temperature inerease of l . t to 6,4 degree for the next century is 
probable [8]. 

The maximum allowable temperatures for the radioactive waste are shown in Table 1 . 1 for norma! 
opcraling conditions and Table 1 2 for accidental conditions, The design of the passi va ventilatie* eoolmg 
is such that high air temperatures are no threat for the heat removai (Le. no exceeding of limit 
temperatures). Conservative values are used in the design. In Table L3 an intake air temperature of 2VC 
is used, which is much higher than the outside temperature in winter periods and on average higher in 
stimmer periods. Due to the very high heat eapacity of the HFW, the temperature of the HPW is fairly 
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independent of outside temperaturen No adverse consequences will result from possibte high air 
temperatures for die safety functions of HABOG, 

The lowest air temperature mcasured is -10,4 °C on 20-1 2-1938. At extremely low outside air 
temperaturen the following effects musl be avoided; 

• deerease in the quality of the diesel fuel inventory 

• freezing of coolant for the diesel generators 

• freezing of the fire extinguishing water inventory. 

Ml rooms in HABOG are heated and the watert i nes are underground, so freezing cftects will not oeeur 
for these systetm. The heat removal of HABOG is not threatened by very low temperatures (e.g. by 
free/ing phenomena etc.). In geiteral, for systems related to safety fimetions, sufficiënt resistance against 
low temperatures is guaranteed by design. 



Extremely high wind {ineluding storm and tornado) 

For HABOG a whirlwind wïth a wind velocity of 1 25 m/s maximum is eonstdered as the design base. 
For wind types, the foliowing subdivision is used; 

» Extreme wind speed (houriy average) 

• Wind gusts (usually less than 20 seconds) 

• Whirlwinds (unpredfctable). 

Extreme wind speed 

The highest wind speed measured is 29,8 m/s on 02-01-1976 (Vlissingen). Research shows that the 
maximum wind speed (houriy average) that eau be expected onee every 1 S 000 years is approximately 
35 m/s [9]. 

Wind gust 

A wind gust is a sudden, brief increasc in speed of the wind. The duration of a gust is usually less than 20 
seeonds. KNMI has determined that the maximum wind gust is roughly 1 .5 fcimes the maximum houriy 
average wind speed [10]. At a wind speed of 35 m/s, this resuits in a maximum wind gust of 53 m/s onee 
every 10,000 years on average. The highest wind gust measured is 41,2 m/s on 25-0M990, 
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Whirlwind 

The Wghesl wind speed Chat was observed by a monitoring station due to a whirlwind in the Netherlands 
is 56 ra/s. On average, each year about two whiriwinds cause some damage to the infrastructure 
somewhere in the Netherlands, over an arca of one square kilometre. it is estimated that tbr a ranclom 
location in the Netherlands, the risk of damage by a whirlwind is 1CT 5 per year [10]. 

For further evaluation of the structural building integrity, an maximum cxpected wind speed of 56 m/s is 
adopted to evaluate the design basis. For the design basis, a wind velocity of 1 25 m/s (estimated 
frequency of occurrenee: 10 6 per year) is adopted. 

Cpnsequences 

The design basis wind velocity is 125 m/s, which gives a significant safety margin to the maximum 
highest wind velocity that was monitored in the Netherlands (56 m/s). 

Damage to the steel and concrete construction of the building, vvith exception of the stack, is not credible. 
The stack has a breaking point which, in case of a break, results in an acceptable stack beight regarding 
the passive eooling system. 

Wind missiles and haii 

Wind missiles are projectiles propelled by extreme wind. A credible effect caused by projectiles could be 
loss of offsite power due to damage to the power lines or the switchyard. This type of event is included in 
tbc loss of offsite power sequences (see Chapter 5). 

Win d turb i nes 

Two wind turbines are located in the vicinity of the COVRA site (indïcated with red circles in Figure 
4. 1). Due to high wind velocities bladcs can tear off and be like missiles. From a risk evaluation by TNO 
it turned out that only the AVO and LOG could be hit by a broken wind turbine blade. As a consequenee, 
the wind turbines are no Üireat for the fundamental safety functions of HABOG. 
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Othcr efïects tfaat may be causcd by wind missiles wiU be iess than the impact of an design basis airplane 
crash and have therefore no impact on nuclcar safety, 



1 mm in 



Hail is defined as precipitation in the form of spherica! or irregular pellets ofice larger than 5 
diameter. Depending on the sizèöf the pellets, some damage to objecis can be expeeted. ft is concluded 
that hail bas no impact on plant safety. 



Heavy rainfall 



Extreme rainfall may induce additional force on building roofs. Because ofraised edges water can 
accumulate on top of the buildings if all drainage pipes are blocked. The largest rceorded amount of 
rainfall in one hour in Vlissingen is 36.9 mm on 23 07-1971 . The largest amount of rainfall in one day is 
80.9 mm on 04-07-2005. 

The statistica of the KNMI show that tbr the area of Vlissingen once every thousand years ( 10 1 per year) 
108 mm of rainfall can be expeeted within a period of 24 hours [11]. For the same conditions, 123 mm of 
rainfall can be expeeted within 48 hours. The roof of HABOG has a thickness of 1 .7m and is designed for 
an airplane crash. HABOG is strong enough to withstand the credible consequences of rainfall. 

Extreme rainfall may also lead to flooding. This topic is covered in chapter 3. 
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Heavy snowfall 

Heavy snowfall may lead to accumutation of snow on roofs, inducing a bad on the civil structure. 
HABOG is designed to withstand the credible consequences of snowfall. Building Standard NEN 6702 
specifies a maximum snow load on flat rooftops of 0,56 kN/m 2 ; which corresponds to a levei of fresh 
snow of approximatcly 0.56 m. 

On average, occasions of more than 20 cm öf snowfall occur once every 10 years and more than 35 cm 
occurs once every 50 years [12], However, if it continues to snow foran extended period, larger val ues of 
snow buüd up can be expectcd. Also, if snow thickens due to altemating high and low temperatures, 
density may increa.se. Since the design load of the roof of HABOG is mucfa higher than the maximum 
load aceording to NEN 6702, due to the heavy reinforeed concrete structure, a significant safety margin is 
available. A conservative estimation of the maximum snow load, by taking a snow mass corresponding to 
about 10% weight of the roof, results in a snow height of more than 4 meter. 

Formation of ice 



•ause 



The formation of ice on the Westerschelde does nol influenee the safe operation of HABOG, becai 
HABOG activities, building and surrounding area are independent of the Westerschelde, and HABOG is 
at sufficiënt distance from the Westerschelde. 

Lightning 

Lightning occurs on average 2 to 3 tunes per kmVyear. Lightning strikes occur in the region ofCOVRA 
approximately 24-26 days a year [3 3]. l ightning has never been an issue for the safety of HABOG. 
HABOG is equipped with lightning proteetion, which is connected to the grounding points. The lighting 
proteetion is aceording to the NEN-nortn 1014 ('Bliksembeveiliging'). Lightning strike may have an 
impact on electrical systems such as the instramentation and controls of HABOG, but this will not have 
an impact on nuclear safety. 

Credible combinations of the conditions mentioncd above 

1 Snow + extreme wind, 

2. Extreme wind + extreme rainfall + lightning. 

Ad 1. Snow and wind combined may lead to formation of ice in the air inlet of H ABOG. This may block 
the air inlet and thereby the cooling of HABOG. However even in the case of a tuit blockade of the air 
inlet, temperatures stay below limit temperatures for normal operating conditions Cfable 1 . 1) for a long time 
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(several montlis, estimation based on KEMA calculations). The few months give cnough time for accident 
management measures for de-icing the air inlet, which makes the risk for a blocked air inlet due to snow 
and wind negligible. 

Ad 2. High winds, combined with extreme rainfali and lightnmg can bc expected during a thunderslorm. 
Beeause the loads caused by these vveathcr condilions are different, they wilt nol reinforce each oiher's 
effect on the plant. 

Conclwsion on the adequacy or protection against extreme weather conditions 

The separate phenomena are discussed in paragraph 4.1.1. It can be eoncluded that no serious 
consequences are to be expected from these phenomena. 



4.2 Evaluation of safety margins 



4.2.1 Estimation of safety margin against extreme weather conditions 

This paragraph cotttains an analysis of the potential impact of different extreme weather conditions on the 
safe operation of HABOG. The safety margin is defined as the difference between the allowable load (by 
design and'or by building Standard} and the maximum load on buildings that can be expected as a result 
of the extreme weather conditions. Loads due to snowfall, rainfali and wind are derived from the weather 
conditions listed in the previous section. The remaining conditions (air temperature, formation of ice and 
lightning strike) cannot be translated into explicit loads on buildings and are only qualitatively discussed 
(i.e. nol quantifïed). 

Extreme high and low air temperaturen 

Extreme high outside air temperatures will nol threaten the fundamental safety functions of HABOG. 
The heat removal of HABOG is well overdesigned to deal with extreme high outside temperatures. For 
exceeding the limit temperature for normal operating conditions, the temperature in the centre of the V- 
HPW must be over 500T (Table 1.1). For normal conditions the maximum temperature in the centre of- 
the V-HPW is about 460°C (Table 1 .3). This temperature difference gives sufficiënt safety tnargin with 
respect to the highest outside air temperature. 

Extreme low air temperatures will nol have an effect on the systems which are essential for eonfinement 
and prevention of criticaiity. Low temperatures may have an impact on the diesel generators, bul these are 
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located inside the building and therefore not exposed to these low temperatures. tn addition, the diesel 
generators are not needed for maintaining the fundamental safety functions (see chapter 5), 

Extremely high wind (iiiciudfng storm and tornado) 

The maximum wind speed (56 m/s) is signiftcantly lower than the design basis (125 m/s) of HABOG. No 
cliff-edge is expeeted coneenüng the faiiure of the buildings due to either maximum credible wind gusts 
or whirlwinds. 

Wind missiles and liail 

No cliff-edge is expeeted eoneeming the faiiure of the buildings due to either wind missiles or hail. No 
quantifiable margin for wind missiles and hail can be given, 

Heavy rainfall 

Even in the incredible case that water is accumulated on the roof the load will not be higher than the 
maximum load. This gives considerable margin eoneeming heavy rain fail 

Heavy snowfali 

In the case that snow is accumulated on the roof the load will be lower than the maximum load. The 
safety margin is at least 4 meter. 

Formation of ice 

Formation of ice on the Westerschelde is not relevant for HABOG. No quantifiable margin for iee 
formation can be given, 

Lightning 

If the facility is subjeeted to lightning pulses with amplitudes above the designed levels, damage or 
spurious actuation of instrumenlation and eontrols may be initiated. In an unlikely case this might lead to 
the shutdown of several systems or a situation of loss of off-site power (see chapter 5), but not resulting in 
off-site eonsequences. 



4.2.2 Measures which can be envisaged to increase robustness of the plant against 
extreme weather conditions 

No measures are deemed necessary to increase the robustness of the plant against extreme weather 
conditions. 
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5 Loss of electrical power and loss of ultimate heat sink 



5.1 Loss of power 



The power supply of HABOG is dcscribcd in scction 1 .3.4. The power supply system is important for 
HABOG operations bul provides no support to nuclear safety funetions. AU systems required for 
supporting the safety funetions have a passive safety design. Ali other processes are designed to simt 
down in a safe marnier following loss of power 

Consequences 

On faiiure orexternal power supply, essential electricity users necessary for bringing the faeility in a safe 
(in terms of working conditions) and rnanagcable condition, are connected to the emergeney power 
supply. This refers e.g. to the ventüalion and hoisting facüities of the unloading and packaging room, the 
(monitoring and registration) instrumentation and emergeney lighting. The hoisting equipment has a 
failsafe response to faiiure of the power supply. After connection to the emergeney power the operations 
with the waste ean safely be resumed and terminated. 

The essential electricity users are connected to the uninterrupted power supply (UPS) and a (one) diesel 
generator. The diesel generator will start automatically when loss ofextemal power supply occurs. The 
UPS battery has a capacity of 5 hour (in 2002 inereased from 30 minutes to 5 hour) for feeding control, 
monitoring and safeguard equipment. The diesel generator is located at the first Hoor (+ 1 0.5 1 NAP). The 
diesel stock tank on the fust floor (separated from the generator room) lias a capacity for about one day. 
Fxtra diesel can be brought in via a pipe connection in the reception area, Outside the building, directly 

beside the reception area entrance, there is a 
connection point for a mobile power generator (see 
Figure 5,1). 

Components that are powerless aller loss of external 
power supply, like the crane in the reception area, can 
be supplied with emergeney power after procedural 
handling and release by the control room. 

F igure 5. 1 Connection point tbr mobile power generator 
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If emergency power is not available (station blackout, no diesel generators and UPS), the loss of the 
(breed ventilation system does not lead to the release of radioaetive products or the increase of 
temperatures above the limit valucs. The consequences and possible actions for the loss of forced 
ventilation are deseribed below for the different rooms/areas (not taken in procedures): 

• Reception area: heat front the waste ean be removed by walls, roof and doors. The ternperature of the 
area mcrcases slowly. Ifnecessaiy, entrance doors can be opened to rcmove the heat 

• Preparation room: heat from the waste can be removed by walls, roof and doors. The ternperature of 
the area increascs slowly. If necessary, the cover, still on the container, can be screwed on the 
container and the container can be transpoited to the reception area 

• Packaging room (hot cell): heat can be removed by walls, floors and doors. ifnecessary, for instance 
during overpacking of a V-canister, the transport opening to the unloading room can be opened 

• Unloading room: in the situation with an open (cover removed) transport container fiiled with 
vitrified material, an equiltbrium ternperature of 430» C of the V-I-IPW will be established aller 
several monlhs. The limit ternperature for normal operating conditions is thereby not exceeded. 

• Storage room non-HPW: the vety small release of hydrogen gas from the non-HPW is transported 
directly to the stack. When hydrogen is not removed from the storage room (e.g. due to blockage of 
the stack), it will take years to build op a hydrogen concentration in the storage rooms which exceeds 
the allowable limit (about 4%). 

In a situation of station black out, monitoring and registration Instruments stop functioning, so the actual 
status with concern to radiation levels and releases are not known in the different areas and 
compartments. Foraltemativc monitoring actions, portable monitors from the HABOG contra! room or 
the AVG building (reception room) can be used. 



5.2 Loss of ultimate heat sink 

In section 1.3.2 the cooling system ofHABOCJ is deseribed. The cooling system consists of a natural 
convection system for the cooling of the heat producing waste. Cooling is required for the long term, to 
maintain the storage of the heat producing waste within the safety boundaries, i.e. below the limit 
temperatures (shown in Table 1.1 for normal operating conditions and Table 1.2 for accidental conditions). 
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The naturel convection system is desïgned in such a way thal the maximum allowable temperatures of the 
heat producing waste and eonstruction materials are nol exceeded during normal opcration, malfonctions 
or accidents (e.g. break of the stack). 

Caieulations show thal even with a 95% blockade of the air iniet the maximum temperature for accident 
conditions of the V-HPW is nol exceeded (calculated by KEMA). Even in the case of a MI blockade of- 
the air inlet, temperatures stay below limit temperatures for normal operating conditions for a long time 
(several monlhs, estimation based on KEMA caieulations). The siluation of a fully blocked air inlet for a 
long period can be considered as highly unrealistic. 



5.3 Loss of ultimate heat sink combined with station blackout 

Cooling of the waste is independent from any power source. The consequences of loss of ultimate heat 
sink and slation blackout (no AC-power at all) are described in the fermer sections. 



5.4 Evaluation of safety margins 

Loss of ultimate heat sink in combination with station blackout does nol threaten the fondamental safety 
functions control of reactivity and confinement of radioactïvity. Cooling of the waste is only threatened, 
i.e. Ieading to exceedance of limit temperatures for normal conditions, when the air inlet is fully blocked 
for a vety long period (several months). Full bloekage of the air inlet for such a long period is considered 
as highly unrealistic. The safety margin is therefore very high. 

Exceedance of the limit temperatures (for nonnal operation) fora long time can result in parttal 
crystallisation of the glass matrix and may ha ve impact on material proporties, like from the canisters, 
welks and concrete (confinement). The confinement funetion is nol threatened in this situation. However, 
due to the impact on material properties it is possible that design requirements with respect to 
confinement functions may not be met in the future. 



5.5 Conclusions 

Loss of ultimate heat sink in combination with station blackout does not threaten the fondamental safety 
functions. Cooling of the waste is only threatened, i.e. Ieading to exceedance of limit temperatures, when 
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the air inlet is Rilly blocked for a vciy long period. Full blockage of the air inlet tbr such a long period 
considcred as highly unrealistic. The safety margin is therefore large. 

5,6 Measures which can be envisaged to increase robustness of the 
plant 

One measure is identifiect to increase the robustness of the plant: 

• Formalise measures in case of loss of power (station black out). 
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i \ Of her extreme hazards 

The following extreme events were identified for this analysis: 

* explosion and fire related hazards: 

o interna! explosion 

o cxternal explosion 

o interaai fire 

o exlernal fire 

o airplane crash 

o toxie gases 

* electrical related issues; 

o large grid disturbance 

o failure of systems by inlroducing computer malware 

* water related issues; 

o interaai flooding, 

The following infonnation is claborated for each of these hazards; 

* General description of the event 

* Description of how the event eould lead to eonsequenees for the safety systems 

* El aboration on these eonsequenees. 



6,1 Interna! explosion 

Interna! explosions are defmed as being those explosions that originate from plant systems and plant 
storages. To proleet SSCs against the impact of interna! explosions the numbcr and volume of explosive 
materials is reduced and risk areas are venttlated. 

The risk of an interaai explosion at HABOG ean be described by the following scenarios: 

* Explosion of diesel inventory 

* Hydrogen explosion. 
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The diesel room area is a classified fins compartment. Por this area, an autoraatic extinguishing system (a 
fine water spray system vvhich is fed by the UPS) is implemented. This system starts (and stops) 
automaticaliy in case of fire but ean be operated manually also. It is also possible to use the available 
manual fbam/CO, fire extinguisher. In the diesel room the tank has a capacity of ottly one day of 
generator operation. Due to the smalt amoimt of diesel, the classified fire compartment and the 
extinguishing systems the fire vvill be limited and will not be a threat to the fundamental safety funelions. 

The hydrogen explosion hazard results from the radiolysis hydrogen releascd by the non-HPW. Together 
with oxygen, hydrogen can form an explosive atmosphere. The flammability lower limit of hydrogen in 
air is 4 %. However the hydrogen flow is very low in relation to the bunker volume. The time before 
reaching 4 % H, in the bunker (without any ventilation) is about 425 days. According to analysis of SGN, 
it was concludcd that there is no risk of a hydrogen concentration higher than 4 % since dilution by the 
building ventilation system is ensured regularly. The design is sueh that any dead /one that can not be 
ventilated is avoided. 



6.2 Externat explosion 

Explosion pressure waves ean generally result from accidents in nearby facilities or means of 
transportation. The potential damage can result from pressure wave impact. Risk evaluation by COVRA 
shows that the maximum overpressure resulting from any pressure wave at the COVR A site is 0.14 bar. 
The design basis is NVR 3.1, which assumes a maximum overpressure wave of 0.3 bar. 

The potential sources of shock waves are shown in the risk map of the area around HABOG in Figure 6.1. 

The risk map shows the risks of death for people (10 fi /y), the risk of damage to HABOG is much lower. 
HABOG is located in the eentre of the map. This risk map shows that external explosions may originate 
from: 

• The main gas pipeline (south and cast) 

• Nuclear power plant Borssele {south) 

• Heerema Marine Contractors (north-west) 

• Transport via the rail, the road Europaweg-zuid (soutlnsast), river Westerscheide (south) and the 
harbour 

• Winturbines 

• Zeeland Refinerty (north-east). 
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There is no serieus threat from explosions/fires from buildings at the COVRA site The COVRA site does 
not have a 10 6 risk contour. 



6.2,1 Main gas pipeline 

The distance of HABOG to the main gas pipeline is approximately 4ööm. The legal Standard tbr high 
pressure gas pipelines is a 1 6 risk contour which is 5 meters from the pipeline. For thia speeific pipeline 
the 10 * risk contour is even smaller (0 m) [14]. Because of the distance to the pipeline, the shockwave 
due to an exptosion of the main gas pipeline wiU be strongly decreased when it reaehes HABOG. The risk 
for a threat of the fundamental safety functtons due to an extemal explosion wiïl therefore be negligible. 
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6.2.2 Nuclear power plant Borssele 

The risk contour of the nuclear power plant Borssele is not shown on the risk map of Figure 6. 1 . The risk 
contour with a risk of death of 10 "/y falis within the site boundaries of EPZ [6]. This risk is however nol 
related to an external explosion bul to radiological incident», The risk contour of any possible expl 
falls well within the site boundary. The risk for a threat of the fundamental safety functions due to a 
external explosion wil! therefore be negligibie. A radiological incident can have the same type of effect 
on HABOG as toxie gases, which are described in section 6.6. 



osiou 



6.2.3 Heerema Marine Contractors 

Heerema Marine Contractors (HMC) is a marine contraclor in the international offshore oil and gas 
industry. The black dashcd cirele at the south of the Heerema site indieales a risk contour with a risk of 
death of 10 V There is a risk contour over the terrein ofCOVRA {ram Heerema where due to the use of 
hazardous substances. At the Heerema site there is an abovéground storage tank with 1 8 m 3 of Üquid gas. 
The risk contour runs on the part of the COVRA site where no building stands, but only one pond. 

Because of the distance from H ABOG to the storage tank and the relativeiy smatl amount of liquid gas, 
the shockwave due to an explosion of the storage tank will be strongty decreased when it reaches 
HABOG. The risk for a threat of the fundamental safety functions due to an external explosion will 
therefore be negligibie. 



6.2.4 Transport via rail, road, river and harbour 
External explosion 

At the industrial area gasses and liquid fuels are transported via rail, road (Huropaweg-zuid) and river 
(Westerschelde). A gas or fuel explosion caused by an accident with a fuel train, truck or ship, tnay occur 
locally. The distance from the main road, rail, surrounding harbour and the matn shipping route to 
HABOG is respectively 500m, 500m, 500m and 2000m. Because of this distance the shockwav e due to 
an explosion will be strongly decreased when il reaches HABOG. Damage, directly or indirectly, to the 
fundamental safety functions of HABOG due to an external explosion on the rail, the road, the harbour or 
the river will therefore be negligibie. 
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Cüas cloud explosion 



A study of TNO concluded that a flammable gas cloud at the COVRA site could only be caused by 
accidents with large ships carrying liquid natural gas on the Westerschelde, Calculations show that the 
concentratioa, of the gas at the COVRA site that exceed the lower explosion limit cannot be excluded. 
This meaas the gas could be detonated onsite or even inside HABOG. The overprcssure inside the rooms 
due .0 the internal explosion has been calculated by TNO, Without performing structural analysis, it has 
been judged that these high overpressures may lead to structural darnage and that preventive measurcs 
should be taken to avoid an internal explosion. 

To prevent a gas cloud explosion inside HABOG, electrical igniters (Figure 6.2) ure placed outside of 
HABOG at carefully chosen positions in the air inkt. Due to the availability of an emergency diesel 
generator the operability of the electrical igniters is guaranteed in the case of a loss of power. Therefore 
the risk for a gas cloud explosion will be negligible. 

The risk of transport of toxic gasses via the Westerschelde is discussed seperately in paragraph 6.6 

ƒ ' \ {/ y\ / I : v T y 





Figure 6.2 Part of the gas deteciion systen 



6,2.5 Zeeland Reflnery 

At the Zeeland Refinery entde oil is refined to several fuels and oüs. The Zeeland Refinery is part of the 
BRZO (Besluit Risico's Zware Ongevallen) of the Dutch autharities. The BRZO contains additional 
safety regulations espeeialiy for high-risk companies. 
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The black dashed line around the Zeeland Refinery (Figure 6. 1 ) indtcates the risk contour with a risk of 
death of 10 ( 7yr. This risk contour is at a significant distance (>lkm) form HABOO. The Zeeland 
Refinery is located at a distance of approximately 1 km From HABOG, The risk for a threat of the 
tundamental safety functions due to an external explosion vvill therefore be negligible. 

6.3 Internal fire 

The risk of an internal fire inside the storage areas is very small due to the vcry low amount of 
eombustible inventory in HABOG. The areas where more combustible material is present are 
accommodated with fire detection systetns. The system gives sound and visual alarms in the control 
rooms of HABOO vvhen detecting a fire. 

In the areas where mechanica] proeesses are implemenled (like craues and tramporlation vehicies) and 
where there is a concentration of cables or electrical cquipment (motors, switchgears, cabinets), the 

postulated source of fire is electrical. All areas containing a fire load density higher than 400 MJ/tn are 
classificd fire compartments. 

Fire compartments are separated from surrounding areas by fire stop barriers (integrated in walls, ceiling, 
floor, doors, air inlet and exhaust dampers, wall crossings). Resistance requirement for fire stop barriers is 
90 minutes at least. Fire detection systems are systematically provided in these areas. Portable 
extinguishers located at the entrance of the areas facüitate quick extinguishing ofany fire. 

In case of fire due to process equipment in the working areas, personnel can use suilable portable or 
mobile extinguisher, which are present in all the areas. The diesel room is equipped with an automatic 
extinguishing system (fine water spray system). 

The risk of a fire in the storage area is small and the risk of a release of large amounts of radioactivc 
material in the case of a fire is extremely small. 



6.4 External fire 

The risks of the surrounding area are shown in the risk map of the area around HABOG in Figure 6.1 i 
section 6.2. The risk of an external fire results from: 

• The main gas pipeline (south-east) 

Heen-ma Marine ( ontractors (north-west) 
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• Transport via the rail road (south-east) 

• Transpon via the road Europaweg-zuid (soulh-eost) 

• Coal Storage (south), 

Fire at ships canying (liquid) fueis on the Westerschelde are not a threat for HABOG because of the 
natural shielding of the water which prevent, spreading of the fire. A kerosene fire due to airptane crash is 
addressed in section 6.5, 

A major influcnee on the spreading of an external lire is the wind directioii. The wind rose of Ftgure 6,3 
shows that the main wind direction is south-west. The highest chance of fire is therefore from the coal 
storage. 



Wind rose Vhssïngen, Year climatology 
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6A1 Main gas pipeiine 

The distanee to the main gas pipeiine is approximateiy 40Üm. The area between HABOG and the main 
gas pipeiine consist raainly of grasslaad. The fire load is so iow that spreading of the fire from the main 
gas pipeiine to HABOG through this way is not possible. 
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6.4.2 Heerema 

At the Heerema site there is an aboveground storage tank with 18 m' of Üquid gas. In Figure 6.1 the 10 ( 7y 
risk contour is shown, which covers a small part of the COVRA terrain where no buildings are loeated. 
The area in between is covered with a road, short grass and a pond, which raakes the possibility of 
transportal ion via theground negligible. 

Spreading of fire to HABOG by extenia! fire at the Heerema site is possible, however only by indirect 
means (delivery of sparks), HABOG is ruainly made of steel and concrete and therefor has a low 
probability of catching fire. Also the wind rose of Figure 6.3 shows that the chance of wind directly from 
the Heerema site to HABOG is small. 

Due to the short distance of the Heerema site to the COVRA site the Lnfluence of smoke and heat 
production should be considered. Both heat and smoke will have influence on the ventÜation system of 
the COVRA facilities. Smoke and heat will tut have <a tlireatening) influence on the fundamental safety 
functions, but will influence the safety of personnel at the COVRA site. Evacuation of personnel at the 
COVRA site due to fire at the Heerema site will however not cause any safety concerns. 

6.4.3 Transport by road and rail 

Transport ofliquefied gasses takes place via the rail and the road Europaweg-zuid, The distance from the 
road and the rad to HABOG is approximately 500m. The area between HABOG and the road and the rail 
consists mainly of grasses. The fire load of the grasses is so low that a spreading of the fire from the road 
and the rail to HABOG through this way is not possible. 



6.4.4 Coal storage 

A coal storage ofEPZ is loeated 300m to the south-west of HABOG {see Figure 6.4). The coal storage 
from EPZ can contain a maximum of 300.000 ton coal [16], 
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Figure 6.4 shows that the area in between HABOG and the coal storage is covered with short grass whieh 
makes the possibility of transportation via the ground negligible. Ignition of HABOG by external fire at 
the coal storage site is possible, however only by indirect mêans (delivery of sparks). I IABQG is mainly 
made of steel and concrete and thereibr has a low probability ofcatching fire. 

The wind rose of Figure 6.3 shows that the main wind direction is from the coal storage to HABOG. In 
the case of a fire of the coal storage the influence of smoke and heat production should be considered. 
Both heat and smoke will have influence on the ventilation system of the COVRA facilities. Due to the 
limited time that a coal fire will exist (aller a few days it can be assumed that the fire will be 
extinguished) and the time necessary to reach limit lemperatures of the HPW (e.g. in the case of a tully 
blocked inkt this will be several months) the smoke and heat will nol have (a threatening) influence on 
the fundamental safety functions. It will influence the safety of personnel al the COVRA site. Evacuation 
of pcrsonnel at the COVRA site due to fire at the coal storage will however not cause any safety 
concerns. 



6.5 Airplane crash 

HABOG is located in the general fly stonc of the civilian air traffic. The airporl Zeeland in Arnemuiden, 
whieh is used for small aircraus only, is located 10 km to the north of the HABOG. The nearest larger 
civilian aiiports (for airplanes weight larger than 5700 kg) are Rotterdam aiiport (Zestienhoven) and 
Brussel airport (Zaventem) at a distance of respectively 75 and 80 km. The nearest military airport is 
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located in Woensdrecht, which is approximately 40 km from the HABOG. HABOO is designed for an 
airplane crash of a F- 16. 

In order to analyze the effect of a beyond design base accident the Nationaal Lucht- en 
Ruimtevaartlaboratorium (NLR) has calculated the chance of a military airplane crash on HABOG. The 
Hoilandsche Beton en Waterbouw BV (HBM-HBW) has analyzed the consequences of a beyond design 
base airplane crash on HABOG. The mam conctusions are: 

* When the impact angle is smaller than 45° (90 a is perpendicular), no perforation of the walt or 
roof surfaee wül occur. The wall or roof surtace will maximally 1 meter be pressed inwards. No 
rupturen are crcatcd whcre radioactive material eould be released trom the containment. 

• If the impact angle is betvveen 45° and 90° degrec, the wall or roof surtace may (depending on 
the geometry) collapse. 

Based on the findings of the Hoilandsche Beton en Waterbouw BV a souree term is defmed for beyond 
design base airplane crash. The assumption is made that a certain percentage of the radioactive waste that 
is stored near the damaged wall, is released. The effects of a kcrosene fire are judged to be small and are 
neglected; it is assumed that the fire lasts very short and takes place outside the HABOG building. The 
Nuclear Research and consultancy Group (NRG) delennincd the consequences for the residents near 
HABOG, presented in the (new, draft) Safety Report. It was found that the individual risk at the site 
border ( 1 00 meter from the release point) is 1 .6 I O 10 per year for adults and 5.9 1 10 per year tbr children. 
These values are far beiow the limits. 



6.6 Toxic gases 

In this chapter the risks of the release of toxic gasscs are discussed. The risk of the release of toxic gases 
originates from: 

• the COVRA. site 

• the surrounding companies 

• rail and road transport 

» a ship on the westerschelde. 
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In all the cases the toxic gasses nray affect the personnel at HABOG. HABOG does not need control from 
the contra! room to assure the fundamental safety functions. Therefore, unavaüahility of (control room) 
stafï/personnel does not threaten any of HABOG 's fundamental safety functions. 

The explosion of the toxic gasses is covered in chapter 6.2. 

In case of release of radioactive materia! from KCB, fundamental safety functions of HABOG are not 
threatened. No measures are defined for this situation. 

Recommendation: Extend the emergency plan of COVRA (BNP) with measures conceming significant 
radioactive releases of the adjacent NPP KCB. 



6.7 Large grid disturbance 

The power supply system is important for HABOG operations, but provides no support to the 
fundamental safety functions. Dismption in the electrieal power supply of HABOG might lead to 
malfunction of systems and controls. Howevcr all systems required for supporting the safety functions 
have a passivé safety design. All other processes are designed to shut down in a safe manner following 
large grid disturbance. This paragraph is further covered by chapter 5 (Loss of electrieal power). 



6.8 Failure of systems by introducing computer malware 

Computer malware can possibiy lead to failure of the overall control system (software/hardware), The 
function of this system is monitoring and alarming concerning Üie handling of radioactive waste. The 
direct control of the proeess, lifce the transport and handling of radioactive waste, needs manual 
interference. Failure of the control system can therefore not influence the fundamental safety functions. 



6.9 Internal flooding 

In chapter 3 (external) llooding is already discussed. The main conelusion is that flooding, due to the 
Westerschelde or by extreme rain fall, does not forra a realistic threat to HABOG. This paragraph 
considers internal flooding, which can be caused by: 

• Break of n mai n water pijieline 
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* Water from fire extinguishing. 

If an internal flooding occurs, the water spreads across the floors and a toealised build up may be 
possible. Due to the sim of HABOG it wül take considerable time before the water level significantiy 
increases. Moreover, it is unlikely that large amotmts oF water are undeteeted in a short span of time, The 
ultimate consequenee eouid be flooding of the waste storage and loss of eketrical supphes. In chapter 3 it 
is evaluated that flooding of the waste storage wül not result in a loss of fundamental safety functions. 
Loss of power is further covered by chapter 5. 
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7 Severe accident management 



7.1 Organisation and arrangements of the licensee to manage accidents 
7.1.1 Organisation of the licensee to manage the accident 

COVRA, the organization which includcs the HABOG facility, employs 58 peoplc. About a quarterof 
these work in shirts, the others during office hours (Monday to Friday from 8.30 to 17.00), Occasionally 
activities outsidc office hours take place in the office, maintenance and/or production, or at informatica 
sessions and tours. 

COVRA is organized according to the scheme presented in Figure 7.1 



mm forate j 


Man 





('MmmmMtü.^n 



SHEO & 



Adminïstraüori 




Operafens 



Figure 7J Organisation chart of COVRA 
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Emcrgency Plan 

The emcrgency plan of COVRA {Beé ijfinaadpla,,) speclfies how its obligations arising frora the Health 
and Safety Aet (Arbo-wet) and the Nuclear Energy Act (KeW vergunning) are included withui its 
organization. The emcrgency plan is tuncd to the nattonal emcrgency organization as is defined in the 
National Plan Nuclear Hmergency Response (Nationaal Plan Kernongevallenbestrijdmg). 

The emcrgency plan is a description of the organization, procedures and measures, taken by CO VRA lo 
mimmize the consequences of an incident or caiamity. The plan contains procedures, roles and most 
responsibilities of crisis team members and authorities that should be contacted in case of crisis. This 
concerns incidents or emergencies that can reasonably occur at the COVRA site. 

The crisis team (CT) is formed in case of incidents involving more serious consequences such as serious 
personal Injury, material damagq, environmental damage (e.g. emission above authorizcd limits) or 
damage concerning public relations. 

Presence and organization of emcrgency response fighters 

At least 20 people of COVRA are trained as emcrgency response fighters (BHVs), so during office hours 
in general sufficiënt BHVs are present. Outside office hours at least one operator (BHV) is present in the 
central control room of COVRA (located in the AVO building). In case of deviations from normal 
operation or emcrgency situations he can call for other BHVs and external security guards, who are in 
consignalion. When necessary, the BHV is supported by specialiste for i.e. radiation protection. In case 
the centra! control room of COVRA cannot be used, the control room in the HABOG building is available 
as an alternative (due to the passive safety functions in HABOG, no remote control room outside the 
COVRA site is deemed necessary). 

The BHV organization ensures the coordination and execution of the emcrgency services in case of 
incidents and/or accidents. The BHVs vvill give assistance to the emcrgency services. The BHV 
organization is led by the head or the deputy head of the BHV. 

Access for emcrgency services 

In case of incidents or accidents thé main entrance of the COVRA site is accessible via the normal 
entranee (the main entrance and the entrance at the secured area). For COVRA, the following arrival 
times are used: 

• Fire brigade 10 minutes 

• Police 1 5 to 30 minutes 
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• Ambulance 1 5 mitiutes. 

Communieaiion during incidcnts and / or accidents 



The central control room is the central point from vvhich the emergency response is coordinated. The 
authorities will contact the central control room or the (deputy) head BHV. 

Training, Exercise and Testing 

Education and training are necessary within the emergency response organization (BHV organisatie). For 
this, courses and training programs are being folbwed. The resulting skills are practieed regularly. 

The emergency response fighters (BHV) are trained for various emergency situations (firefighting etc.). 
An important part of the training is the support of extemal assistance (e.g. guidancc for the lire brigade). 

The head BHV is responsible tbr the training and exercise program to be initiated and carried out. This 
training program is designed to ensure that all required skills are trained and testcel. The results of the 
exereises are evaluated and measures for improvement are suggested. 



7.1.2 Possibility to use existing equipment 

For HABOG the safety functions applicable to the facility and their operation are eonfmement and 
cooling of the waste and control of sub-criiicality. All systems required for supporting the safety 
functions have a passive safety design. As a result, power supplies are not essential for maintainmg the 
facilities safety (see section 5). So compared to an NPP no provisions for emergency situations are 
necessary. 

In this secüon the available means and facilities for emergency situations are described. 
Emergency Response Resources 



tve 



COVRA has several emergency response resources, like fire-fighting tools and personal protectie 
equipment that can be used to fight a calamity in and around HABOG, The equipment in the HABOG 
building consisls of Standard fire fighting extinguishers. 
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Equipmcnt emergency organisation 

The staffofthc emergency response organisation can extend over the entire premises ofCOVRA. 
However, in order to achieve a rapid deploymertt with the right lools in case of emergency, BHVs and 
first aid posts are divided over the area according to the lire brigade emergency plan. The loeation of the 
posls is determincd in such way that the whole area can be controlled and adjusted to the specific risks of 
that loeation. 

At COVRA sufficiënt resources such as Ore extinguishers, means of communication and first aid 
equipment are available to make efïeetive actions of the BHVs possible. This equipmcnt is inspectcd and 
mainlained on a regular basis. At various places in the focililies signs are plaeed with itistrucüons for 
accident siuiations and escape routes, 

Firc-extinguisliing arrangements HABOG 

HABOG is equipped with a sprinkler system in the room with the emergency diesel day tank. These 
systems start (and stop) automatically in case of occurring iïre but can also be opcrated manually. 

In addition various types of extinguishers are present (foam and CO,) inside the building. HABOG is nol 
equipped with hose reels. 

Firewater supply outsidc the buildings 

The firefighting water is snpplied by surface hydrants. The surlaee hydrants are connected to a fue 
extinguisbing pipe network. The pipe network is led with water trom the firewater pond (contents: 
10,000 m') It is also possible to use water from the firewater pond directly. 

Firc alarm system 

The central control room (24/7 occupied) is equipped with a fire control panel for HABOG. Ifa fire alarm 
in HABOG is given, the room from which the alarm was initiated is shown on the control panel. 

HABOG has a fire panel (Mimic) near the entrance, When entering the building it can be noticed at what 
room the firc alarm was given. 

Foreed ventilation system in HABOG 

The ventilated air of the different rooms is, finally, discharged through absolute filters, This air is 
monitored for the presence of radioactive materials. 



6875 



23251/13 1 IB7I2 



N 

The existing fire dampers are closcd automatically when addressmg a fire alarm. The fire dampers ean be 
closed from the HABOG control room as weli as locally. 



7.1.3 Evaluation of factors that may impede accident management and respective 
contingencies 

When the emergency plan at the COVRA site is actuated, the crisis centre in the central control room will 
be used. In the crisis centre divers (communication) faciüties are available. The COVRA site (Spanjcweg) 
can be reached by road transport. The train roads N254 (from west direction) and N62 (from east 
direction) are at a distancc of about 3 km from the site. The COVRA site ean be approached by water 
transport from the Van CHttershaven/Kaloothaven at the north of the site and via the Westerschelde from 
the south-west. Access to HABOG is also possible by railway, coming from the south (Europaweg Zuid). 
So several alleraative routes to reach HABOG are available when obstacles or damages may block 
normal access routes to the site. When routes over land are impossible, alteniative ways are possible via 
air (a helicoptcr can land on the roof of HABOG) and water (boat). 

Alter finishing (the necessary) operations in the facility, it is net needed to monitor and control the safety 
functions confinement, cooling and subcritieality. The task of the emergency responders is to prevent for 
(more) accidental conditions (e.g. prevent spreading of fire) at the site. 

Power supplies are nol essential for maintaining safety (see sectio» 5). However, in case or emergency 
situations extra portable dosimeters may be necessary e.g. due to empty batteries. 

The responsibilities of crisis team members is net fully covered in the emergency plan. 1 lus may result in 
inefficiencies and extra time needed during crisis response. 



7.1 .4 Conclusion on the adequacy of organisational issues for accident management 

COVRA, and therefore HABOG, has an emergency plan which can be scaled up for management by the 
crisis team. The site can be reached by alteniative routes. COVRA has an emergency response 
organisation with sufficiënt means to fight different calamities. The emergency fighlers are trained for 
various emergency situations. On this basis it can be concluded that the organisational issues for accident 
management are adequate. However, for strengthening the emergency organisation the following is 
recommended: 

• Extend the number of "ready to use" portable dosimeters in and around HABOG 
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• Extend the emergehcy plan with a dcscription of alt, tully covering, responsibilities of crisis team 
members. 



7.2 Maintaining the safety functions 



7.2.1 Prevention of loss of contatnment integrity 

in scclion 1 .3.3 the principal controls and safeguards to prevent release of radioactivity are described. The 
fundaniental safety principte for waste storage is to maintain containment at all tiraes during normaJ 
operations and pperate the facility so as to minimi/e the potentkl for a release in fault conditions, Any 
discharges are fittcred and nionitored beforc release through authorized routes to the environment. 



7.2.2 Prevention of loss of cooling 

The principal controls and safeguards to prevent loss of cooling are described in section 1.3.2. The stack 
(air outlet) has a breaking potnt which, in case of a break, resulis in an acceptable stack height regardmg 
themiat aspects. In a simation in which the air inlct is bloeked, limit temperatures wil! not be exceeded 
wilhin several months. Enough time will be available to restore the postulated situation. 



7 2.3 Prevention of criticaiity 

The principal controls and safeguards to prevent criticaiity are described in section 1.3.1. Due to the type, 
amounts of waste stored and the design of the storage equipment, oecurrence of criticaiity is practicalty ' 
eliniinated. 



7.2.4 Conclusion on the adequacy of severe accident management systems for 
maintaining the safety functions 

In relation to confinement, cooling and subcritiealïty contrei of the high radioactive waste, the design of 
the equipment, the facility installation and the operation of the facility shows to be adequate. The 
emergency response organization is prepared and equipped in case of accident conditions. 
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7.3 Accident management measures to restrict releases 



The emergency plan of COVRA {Bedrijfsnoodplan) addresses accident categorie*. For the calegory of 
extreme cvents. such as airplane crashes, flooding, external Ure, explosions etc. the following 
management measures are described. 

The municipa! emergency plan of the municipality Borsele immediately enters into force according to the 
National Plan Nuclear Emergency Response (Nationaal Plan Kernongevallenbestrijding). The Crisis 
Team theretbre immediately informs the mayor of Borsele. In consultation further actions will be taken. 
At the COVRA site sufficiënt resources, such as fire extinguishers, means of communication and first aid 
equipment are available to make effective actions of the emergency fighters (BHVs) possible. The 
emergency plan describes at what tocations emergency equipment is available. 

No specific accident management measures are defmed in the emergency plan to reslrict radioactive 
releases from HABOG, nor are these deemed necessary. 



7.4 Measures which can be envisaged to enhance capability to maintain 
safety functions and restrict releases 

The following measures are recommended to enhance the capability to maintain safety functions and 
restrict releases: 

• Extend the number of "ready to use" portable dosimeters in and around HABOG 

• Extend the emergency plan with a description of all, fully covering, responstbilities of crisis tcan 
members. 
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Abbreviations 

ADR Accord europeen relatif au transport international des marclmndises Dangereuses par 

Route 

AVO Waste treaiment building COVRA (afvalverwerkingsgebouw) 

BDBA Beyond Design Base Accident 

BDBH Beyond Design Base Eartquake 

BDB F Beyond Design Base Fiood 

BNP Emergency Plan (Bedrijfsnoodplan} 

COVRA Centrale Organisatie Voor Radioactief Afval 

DBA Design Base Accident 

DBB Design Base Earthquake 

DBF Design Base Flood 

GKN Comnion NPP the Nethertands (Gemeenschappelijke Kernenergiecentrale Nederland) 

HABOG Hoog radioactief afval behsndelings- en opslaggebouw 

HPW Heat Produeing Waste 

NBP Nüclear base levet (Nucleair BasisPei 1) 

NOP Nuclear design level (Nucleair OntwerpPcil) 

NPP Nuclear Power Plant 

non-HPW Non*Hcat Produeing Waste (terms by COVRA: CSD-B and CSD-C) 

KCB Borssele Nuclear Power Plant (KemCentrale Borssele) 

V-HPW Vitrified lïssion products Heat Produeing Waste (term by COVRA: CSD-V) 

NAP Mean sea level (Nieuw Amsterdams Peil) 

NPP Nuclear Power Plant 

NVR Dutch nuclear rcquiretnents (Nucleaire VeiligheidsRegels) 

POA Peak Ground Aceeleratioti 

PSA Probabilistic Safety Assessment 

RR-I 1P W Research Reactor Heat Produeing Waste (term by COVRA: ECN canister) 

SGN Soeiete Generale pour les Techniques Nouvelles (France) 

SSC Structures, Systems and Components 

üps Uninterrupted Power Supply 
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